[PATCH] Enable Samba KCC for 4.5

[Jeremy Allison]

On Thu, Jun 30, 2016 at 04:08:39PM +0200, Ralph Boehme wrote:
> On Thu, Jun 30, 2016 at 03:45:28PM +0200, Andreas Schneider wrote:
> > On Thursday, 30 June 2016 11:12:10 CEST Denis Cardon wrote:
> > > Hi Andreas and everyone,
> > 
> > Hey,
> > 
> > > > The samba_kcc stuff is already upstream but you say that it is not fully
> > > > working yet and you want to turn it on now.
> > > 
> > > We've been using the new samba_kcc since samba 4.3.0 (it was actually a
> > > prerequisite for one of our project last september). The new KCC does
> > > work and gives something corresponding to the topology designed in sites
> > > & services mmc. It gives us satisfaction with domains from a few sites
> > > to dozens of sites. Currently the biggest samba_kcc managed domain we
> > > have has 40+ sites and DCs.
> > 
> > the thing is I could argue the same for the MIT Kerberos support. It works 
> > very well, I can establish trusts with FreeIPA, Windows etc., but it isn't 
> > completely bug free, feature complete and needs polishing.
> 
> in a rush I read this as "Samba works very well, ... , but it isn't
> completely bug free, feature complete and needs polishing."
> 
> How was against pushing your code upstream? I don't remember any
> discussion bout this on the list.

Yes, I too am really looking forward to getting the MIT
kerberos kdc enabled in Samba. Andreas, what is blocking your
getting this code upstream ? If you need review help, please
let me know (although I'm going to be off on vacation and
out of contact next week).